diff --git a/lib/workers/repository/init/vulnerability.ts b/lib/workers/repository/init/vulnerability.ts
index 51d06039d84b064dbb3b6d08f729f23eeead0720..22ea4001ffa1218728ddb89b2e8a2d3ec09e8189 100644
--- a/lib/workers/repository/init/vulnerability.ts
+++ b/lib/workers/repository/init/vulnerability.ts
@@ -173,6 +173,7 @@ export async function detectVulnerabilityAlerts(
             matchDatasources: [datasource],
             matchPackageNames: [depName],
             matchCurrentVersion,
+            matchFiles: [fileName],
             allowedVersions,
             prBodyNotes,
             isVulnerabilityAlert: true,
@@ -180,7 +181,6 @@ export async function detectVulnerabilityAlerts(
               ...config.vulnerabilityAlerts,
             },
           };
-          matchRule.matchFiles = [fileName];
           alertPackageRules.push(matchRule);
         }
       }